Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/af56c26b-429b-351b-b947-c8b53bdd868c.roa
File: af56c26b-429b-351b-b947-c8b53bdd868c.roa (raw, json)
Hash identifier: k3kNZr3pFqyM9xN5r60rR7IYzu4vrrbExLNsJSmc500=
Subject key identifier: 47:0C:8F:0C:C3:50:5E:9A:3A:BE:66:25:38:BD:C4:A1:2B:E1:17:E2
Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial: 010D0C9F432858487B85B4DCA092FD1679FBCB80
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/af56c26b-429b-351b-b947-c8b53bdd868c.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 33039
IP address blocks: 2602:f95c:ca2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:b4:dc:a0:92:fd:16:79:fb:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=625c2a4a-cc8d-422e-9e0d-2a6ab368a77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d1:df:5d:ef:d6:6a:3b:3e:6d:98:78:73:0b:
fc:84:ab:b3:e0:db:6a:1b:36:91:ec:0a:1f:b7:28:
be:a3:28:18:13:69:85:b5:e1:ef:55:72:95:5a:c3:
09:36:f5:91:ff:28:f0:7c:dd:29:06:c7:1b:37:ff:
52:c6:d1:a0:6a:08:c6:34:4b:22:e3:15:a7:bc:2f:
c4:5b:d1:cf:35:ea:a7:24:48:eb:cd:fd:0e:93:aa:
ba:f8:82:27:5c:a0:d0:53:ce:2b:8e:57:e8:87:65:
e1:f9:82:d8:ac:99:b1:55:97:5e:c4:d1:d0:85:37:
c8:06:22:23:83:e4:b3:68:a4:31:2e:17:0b:83:32:
d4:85:72:f9:29:87:f4:ae:8c:54:fc:df:79:5d:fa:
f0:52:ff:ae:92:ac:3b:10:5d:c9:d9:7d:3c:7d:b9:
4c:e5:12:36:66:85:f5:9f:b4:f5:f7:c7:7d:20:ac:
70:86:06:79:17:0f:f4:41:31:ac:64:4d:29:dc:b0:
9f:e5:35:15:e0:7b:7c:18:f2:f3:87:ed:99:79:80:
6d:30:d9:a6:df:29:70:84:c6:04:1b:47:ad:07:87:
df:af:43:41:07:5e:6b:04:37:51:6a:9b:8c:b2:69:
21:80:d6:d1:9e:90:87:4f:0e:38:eb:29:92:ff:e7:
32:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0C:8F:0C:C3:50:5E:9A:3A:BE:66:25:38:BD:C4:A1:2B:E1:17:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/af56c26b-429b-351b-b947-c8b53bdd868c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
X509v3 Authority Key Identifier:
keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f95c:ca2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:19:4a:b3:e8:44:89:4f:bc:ae:2a:f7:d7:61:f9:e2:cf:5c:
2f:12:b7:2d:35:80:63:3e:69:21:5a:a9:77:0a:46:ed:e0:f0:
98:eb:17:da:eb:eb:d8:44:96:21:92:ac:cd:d1:ec:f8:f5:4a:
78:b6:6c:9b:8c:67:45:27:3d:8f:97:fd:2a:e8:f9:9c:83:f4:
23:42:e5:cd:59:68:56:39:29:89:79:fe:32:aa:56:f6:3f:e7:
02:5a:20:ff:79:c3:a1:4a:70:0f:63:1b:60:b3:40:b6:5b:ee:
71:3a:42:61:2a:c4:3f:12:22:a9:80:3c:bc:02:e1:78:57:cb:
ea:11:d9:02:bf:d4:21:8a:c7:aa:9b:12:45:c4:42:c0:0d:15:
52:c3:a9:1f:f2:1b:c1:93:9e:21:e8:5a:8e:3c:26:17:44:85:
13:8a:16:3d:51:49:c7:ef:53:70:1b:16:6f:19:b4:b9:41:9f:
f7:ff:13:6a:b5:42:75:ba:fa:fd:a4:15:5c:8c:6e:b6:30:bf:
92:13:5b:4e:29:dc:0a:8c:b7:cd:cc:27:f8:54:10:70:b0:e1:
ac:7f:20:e3:68:0a:e4:a6:11:02:ba:5e:6a:8b:1c:dc:fd:61:
d4:19:6b:05:81:32:05:74:eb:38:ae:e2:42:ca:2a:ef:52:e0:
63:bb:5d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:57 2025 by rpki-client